[OpenAFS] OpenAFS 1.6.0pre7 and Mac OS 10.7 (Lion) cannot aklog

Kallback-Rose, Kristy A kallbac@indiana.edu
Mon, 8 Aug 2011 13:56:58 -0400


Hello,

I am trying to get OpenAFS client working under Lion. I have tried the =
tricks listed in other posts such as allow_weak_crypto =3D true and =
directly specifying encryption types in the Kerberos config file. =
However, I still cannot get AFS to startup or aklog to work. Kinit works =
fine.

I should note that a co-worker upgraded to Lion using this version + the =
weak crypto option and all worked fine. I am trying this on 2 test =
MacBooks with the same results --so I don't think it's on the OpenAFS =
server side.

Let me know what other details I should provide that might be useful in =
troubleshooting this.

When I try to start the client I see in the console:

8/4/11 3:36:37.178 PM System Preferences: Starting up afs
8/4/11 3:36:41.284 PM authexec: executing =
/Library/OpenAFS/Tools/root.client/usr/vice/etc/afs.rc
8/4/11 3:36:41.359 PM com.apple.kextd: Failed to load =
/var/db/openafs/etc/afs.kext - (libkern/kext) kext (kmod) start/stop =
routine failed.

I feel confident that the allow_weak_crypto =3D true is recognized =
because when I aklog without that in the file I get:
~ kallbac$ aklog -d
Authenticating to cell iu.edu (server rfs1).
Trying to authenticate to user's realm ADS.IU.EDU.
Getting tickets: afs/iu.edu@ADS.IU.EDU
Kerberos error code returned by get_cred : -1765328234
aklog: Couldn't get iu.edu AFS tickets:
aklog: unknown RPC error (-1765328234) while getting AFS tickets

--where  -1765328234 is -1765328234	KRB5_PROG_ETYPE_NOSUPP	Program =
lacks support for encryption type

while with allow_weak_crypto  I get (the rather strange looking)
~ kallbac$ aklog -d
Authenticating to cell iu.edu (server rfs1).
Trying to authenticate to user's realm ADS.IU.EDU.
Getting tickets: afs/iu.edu@ADS.IU.EDU
Using Kerberos V5 ticket natively
About to resolve name  ??d?. ??d? to id in cell iu.edu.
Id 32766
Set username to  ??d?. ??d?
Setting tokens.  ??d?. ??d? @ iu.edu
aklog: a pioctl failed while obtaining tokens for cell iu.edu

By running  kextutil -v 6 /var/db/openafs/etc/afs.kext as root I get

Kext user-space log filter changed from 0xff2 to 0xfff.
Kext kernel-space log filter changed from 0xff2 to 0xfff.
Kext library architecture set to i386.
Kext library recording diagnostics for: validation authentication =
dependencies warnings.
/var/db/openafs/etc/afs.kext appears to be loadable (not including =
linkage for on-disk libraries).
Loading /var/db/openafs/etc/afs.kext.
Reading load info for 4 kexts.
Reading loaded kext info from kernel.
(kernel) User-space log flags changed from 0x0 to 0xfff.
(kernel) Received 'Get Loaded Kext Info' request from user space.
(kernel) Returning loaded kext info.
Loaded kext info:
{
"com.apple.kpi.mach" =3D {
  "OSBundleWiredSize" =3D 2032
  "CFBundleIdentifier" =3D "com.apple.kpi.mach"
  "OSBundleUUID" =3D <bac1677f 9cad49e7 abef4d6e 6d42c02e>
  "OSBundleLoadAddress" =3D 9646080
  "OSBundleLoadTag" =3D 5
  "OSBundleStarted" =3D true
  "OSBundleCompatibleVersion" =3D "8.0.0d0"
  "OSKernelResource" =3D true
  "CFBundleVersion" =3D "11.0.0"
  "OSBundlePath" =3D
      "//System/Library/Extensions/System.kext/PlugIns/Mach.kext"
  "OSBundleRetainCount" =3D 86
  "OSBundlePrelinked" =3D true
  "OSBundleIsInterface" =3D true
  "OSBundleLoadSize" =3D 2032
}
"com.apple.kpi.bsd" =3D {
  "OSBundleWiredSize" =3D 23880
  "CFBundleIdentifier" =3D "com.apple.kpi.bsd"
  "OSBundleUUID" =3D <2c050b25 bab14483 92f4bf45 e21665c5>
  "OSBundleLoadAddress" =3D 9719808
  "OSBundleLoadTag" =3D 1
  "OSBundleStarted" =3D true
  "OSBundleCompatibleVersion" =3D "8.0.0b1"
  "OSKernelResource" =3D true
  "CFBundleVersion" =3D "11.0.0"
  "OSBundlePath" =3D
      "//System/Library/Extensions/System.kext/PlugIns/BSDKernel.kext"
  "OSBundleRetainCount" =3D 69
  "OSBundlePrelinked" =3D true
  "OSBundleIsInterface" =3D true
  "OSBundleLoadSize" =3D 23880
}
"com.apple.kpi.libkern" =3D {
  "OSBundleWiredSize" =3D 36448
  "CFBundleIdentifier" =3D "com.apple.kpi.libkern"
  "OSBundleUUID" =3D <a9ee657f 1f7b45e9 8a1853a0 c2d00bad>
  "OSBundleLoadAddress" =3D 9682944
  "OSBundleLoadTag" =3D 4
  "OSBundleStarted" =3D true
  "OSBundleCompatibleVersion" =3D "8.0.0d0"
  "OSKernelResource" =3D true
  "CFBundleVersion" =3D "11.0.0"
  "OSBundlePath" =3D
      "//System/Library/Extensions/System.kext/PlugIns/Libkern.kext"
  "OSBundleRetainCount" =3D 95
  "OSBundlePrelinked" =3D true
  "OSBundleIsInterface" =3D true
  "OSBundleLoadSize" =3D 36448
}
}

/System/Library/Extensions/System.kext/PlugIns/Mach.kext (version 11.0, =
UUID BAC1677F-9CAD-49E7-ABEF-4D6E6D42C02E) is loaded.
/System/Library/Extensions/System.kext/PlugIns/Mach.kext (version 11.0): =
is started.
setting load address of =
/System/Library/Extensions/System.kext/PlugIns/Mach.kext to 0x933000
/System/Library/Extensions/System.kext/PlugIns/BSDKernel.kext (version =
11.0, UUID 2C050B25-BAB1-4483-92F4-BF45E21665C5) is loaded.
/System/Library/Extensions/System.kext/PlugIns/BSDKernel.kext (version =
11.0): is started.
setting load address of =
/System/Library/Extensions/System.kext/PlugIns/BSDKernel.kext to =
0x945000
/System/Library/Extensions/System.kext/PlugIns/Libkern.kext (version =
11.0, UUID A9EE657F-1F7B-45E9-8A18-53A0C2D00BAD) is loaded.
/System/Library/Extensions/System.kext/PlugIns/Libkern.kext (version =
11.0): is started.
setting load address of =
/System/Library/Extensions/System.kext/PlugIns/Libkern.kext to 0x93c000
Omitting loaded kext =
/System/Library/Extensions/System.kext/PlugIns/Mach.kext from mkext for =
kernel load.
Omitting loaded kext =
/System/Library/Extensions/System.kext/PlugIns/BSDKernel.kext from mkext =
for kernel load.
Omitting loaded kext =
/System/Library/Extensions/System.kext/PlugIns/Libkern.kext from mkext =
for kernel load.
Adding /var/db/openafs/etc/afs.kext to mkext.
/var/db/openafs/etc/afs.kext added 1054644-byte noncompressed executable =
to mkext.
Created mkext for architecture i386 containing 1 kexts.
Loading /var/db/openafs/etc/afs.kext.
(kernel) User-space log flags changed from 0x0 to 0xfff.
(kernel) Received kext load request from user space.
(kernel) Received request from user space to load kext =
org.openafs.filesystems.afs.
(kernel) Loading kext org.openafs.filesystems.afs.
(kernel) Kext com.apple.kpi.mach is already loaded.
(kernel) Kext com.apple.kpi.bsd is already loaded.
(kernel) Kext com.apple.kpi.libkern is already loaded.
(kernel) Allocated link buffer for kext org.openafs.filesystems.afs at =
0x1562000 (851968 bytes).
(kernel) Kext org.openafs.filesystems.afs executable loaded; 208 pages =
at 0x1562000 (load tag 117).
(kernel) Kext org.openafs.filesystems.afs calling module start function.
(kernel) Kext org.openafs.filesystems.afs did not start (return code =
0x5).
(kernel) Kext org.openafs.filesystems.afs start failed (result 0x5).
(kernel) Kext org.openafs.filesystems.afs failed to load (0xdc008017).
(kernel) Failed to load kext org.openafs.filesystems.afs (error =
0xdc008017).
(kernel) Kext org.openafs.filesystems.afs unloading.
(kernel) Kext org.openafs.filesystems.afs unwiring and unmapping linked =
executable.
(kernel) Kext org.openafs.filesystems.afs unloaded.
(kernel) Kext org.openafs.filesystems.afs removing all personalities =
naming it from the IOCatalogue.
Kernel error handling kext request - (libkern/kext) kext (kmod) =
start/stop routine failed.
Failed to load /var/db/openafs/etc/afs.kext - (libkern/kext) kext (kmod) =
start/stop routine failed.
Failed to load /var/db/openafs/etc/afs.kext - (libkern/kext) kext (kmod) =
start/stop routine failed.